On Fri, 2008-04-11 at 09:55 +0000, Moritz Naumann wrote:
> <[EMAIL PROTECTED]> <[EMAIL PROTECTED]>
> Message-ID: <[EMAIL PROTECTED]>
> X-Sender: [EMAIL PROTECTED]
> Received: from janus.zertificon.com [213.23.92.1] with HTTP/1.1 (POST); Fri, 
> 11
>       Apr 2008 09:55:58 +0000
> User-Agent: freeIT.org Webmail
> Content-Type: text/plain; charset="UTF-8"
> Content-Transfer-Encoding: 8bit
> 
> 
> Thanks for providing the updated MD5!
> 
> 
> 
> Unfortunately, this does not seem to fix this version of the package:
> 
> 
> 
> If a user already has version 1.4~bpo40+1 (or the 1.4 version as available
> 
> in sid for this matter) of the package installed, she will not retrieve the
> 
> update when doing aptitude dist-upgrade.
> 

Does this work ?

man update-flashplugin-nonfree
update-flashplugin-nonfree --install

> 
> 
> If a user did not have flashplugin-nonfree installed (from sid or
> 
> etch-backports) and installs it now, she will end up with an unhelpful
> 
> error message saying:
> 
> > MD5 checkum mismatch
> 
> > failed: --install
> 

Are you sure about that ?

> 
> 
> And while the package has been successfully installed by means of the
> 
> package manager, its functionality is not provided, which, in my point of
> 
> view, should make us consider it broken.
> 

Installing update-flashplugin-nonfree is successful.  Running
update-flashplugin-nonfree is successful depending on multiple
conditions, including networking.

> 
> 
> And for those who already have version 1.4~bpo40+1 (etch-backports) or
> 
> version 1.4 (sid) installed, the security impact remains, and with this bug
> 
> being closed, they have no debian way (such as through apt-listbugs) to
> 
> find out.
> 

The user of flashplugin-nonfree is expected to use
update-flashplugin-nonfree to keep the plugin up-to-date.

Regards,

Bart Martens




Reply via email to